Overview

overview

10

Static

static

10

dabapkapka...ka.apk

android-9-x86

1

LenovoSafeBox455.apk

android-9-x86

1

LenovoSafeBox455.apk

android-10-x64

1

LenovoSafeBox455.apk

android-11-x64

1

busybox

debian-9-armhf

1

toolbox

ubuntu-18.04-amd64

LenovoSafe...15.apk

android-9-x86

1

LenovoSafe...15.apk

android-10-x64

1

LenovoSafe...15.apk

android-11-x64

1

aresEX.dat

debian-9-armhf

1

athena

debian-9-armhf

athena_v2.dat

debian-9-armhf

c

debian-9-armhf

3

c_x86

ubuntu-18.04-amd64

1

competing_su

debian-9-armhf

3

competing_x86

ubuntu-18.04-amd64

3

cputest

ubuntu-18.04-amd64

firewall.dat

debian-9-armhf

godEX.dat

debian-9-armhf

injectso_arm

debian-9-armhf

injectso_x86

ubuntu-18.04-amd64

iptables

debian-9-armhf

libphonehook_armv6.so

debian-9-armhf

1

libphonehook_armv7.so

debian-9-armhf

1

libphonehook_x86.so

ubuntu-18.04-amd64

1

libsystemh...mv6.so

debian-9-armhf

1

libsystemh...mv7.so

debian-9-armhf

1

libsystemhook_x86.so

ubuntu-18.04-amd64

1

nb.apk

android-9-x86

nb.apk

android-10-x64

nb.apk

android-11-x64

Analysis

  • max time kernel
    1s
  • max time network
    125s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20221125-en
  • resource tags

    arch:armhfimage:debian9-armhf-20221125-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    10/07/2023, 18:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c

  • Size

    62KB

  • MD5

    f8583a513356ff6116a2e225c4f53651

  • SHA1

    4cd70539a45e6a7ad7a663b535d99f8b16ba0c49

  • SHA256

    b6ff34ace8344b2fe43fa2648c83538d4d5afbea5a1b0549249eb595886d5fb3

  • SHA512

    26a96ae1015173111ebadacdd82f12dfb661428a173734b339644a3aa03669b8dbe18ce67c3a86b58a35fa5648d28c9f72de39b3bace8db5cc5bfaab90422696

  • SSDEEP

    1536:p3CJO+rVG/2s/Vlhd9w/zvL5jNceSowKJFXQbws3jBrt6r:4XJG/ZVt9OT5jNcFFbxBrC

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/c
    /tmp/c
    1⤵
    • Reads runtime system information
    PID:376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads